[WIP] Account Removal #578
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
@dpslwk nowhere near finished yet, mostly wanting to know whether this approach is ok. basically added an interface called
EntityObfuscatableInterfacefor the functionobfuscate. Thought about traits and attribute annotations but not sure if that's a better approach.in terms of obfuscation so far, if a user performs an account removal:
User(we need to retain name and address for 10 years) - so just the email address at the moment, and unlink it fromAccountProfilefor bank transactions, we need to keep those for seven years but I dont see any harm in keeping them longer. I started looking into finding historic transactions which are no longer linked to users - we can keep the amount and linked account, but just erase the description (after 7 years). probably best to have a separate job to go through this view:
for snackspace transactions, I don't think we need to do anything, but we might to unlink them from a
Userafter they request removal, retaining the actual transactions for statistics.similar for door logs, unless we decide it would be best to unlink these after 3 years regardless of account deletion.
cheers